Behind the Open Source Browser Project 




TODAY, MOST OF WHAT 
WE USE THE WEB FOR ON A 
DAY-TO-DAY BASIS AREN'T 
JUST WEB PAGES, THEY'RE 
APPLICATIONS. 



Brian Rakowski, 
Product Manager 




PEOPLE ARE 
WATCHING AND 
UPLOADING VIDEOS, 
CHATTING WITH EACH 
OTHER, PLAYING 
WEB-BASED 
GAMES- 




ALL 

THESE THINGS 
THAT DIDN'T EXIST 
WHEN THE FIRST 
BROWSERS WERE 
CREATED. 
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Pam Greene, Software Engineer 





WHEN 
WE STARTED 
THIS PROJECT, THE 
GEARS GUYS WERE 
SAYING THAT OME OF THE 
PROBLEMS WITH 
BROWSERS IS THAT 
THEY'RE INHERENTLY 
SINGLE-THREADED. 
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FOR EXAMPLE, ONCE YOU HAVE 
JAVASCRIPT EXECUTING, IT'S GOING 
TO KEEP GOING, AND THE BROWSER 
CAN'T DO ANYTHING ELSE UNTIL 
JAVASCRIPT RETURNS CONTROL TO 
THE BROWSER. 
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AMD IF THERE'S A BROWSER BUG IN 
THE REMDERER (AND OUR 
EXPERIENCE IS THAT IT'S ALMOST 
IMPOSSIBLE TO ELIMINATE ALL BUGS), 
WE STILL ONLY LOSE THE ONE TAB. 




WHEN ONE TAB GOES DOWN YOU 
GET A 'SAD TAB' BUT IT DOESN'T 
CRASH THE WHOLE BROWSER. 




A MULTI-PROCESS 
DESIGN MEANS USING A BIT 
MORE MEMORY UP FRONT. EACH 
PROCESS HAS A FIXED 
ADDITIONAL COST. 



BUT OVER TIME, IT 
WILL ALSO MEAN 

LESS MEMORy 
BLOAT. 




IN A TRADITIONAL BROWSER, 
YOU ONLY HAVE ONE PROCESS 
AND ONE ADDRESS SPACE 
THAT YOU KEEP LOADING WEB 
PAGES INTO. 



WHEN YOU HAVE TOO MANY 
TABS OPEN, YOU CAN CLOSE 
SOME TO FREE UP MEMORY. 
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WHEN YOU BRING IN ANOTHER 
TAB, YOU USE THE MEMORY 
THAT WAS PREVIOUSLY USED. 
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BUT AS TIME GOES ON, 
FRAGMENTATION RESULTS — 
LITTLE BITS OF MEMORY 
STILL GET USED EVEN WHEN 
A TAB GETS CLOSED. 
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Mike Belshe, 
Software Engineer 
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AND THIS PROBLEM GROWS ALL DAY, AS 
THE LIFETIME OF THE BROWSER EXTENDS. 



TRY CLOSING SOME TABS. 




BUT WHEN A TAB IS CLOSED IN GOOGLE 
CHROME, YOU'RE ENDING THE WHOLE PROCESS 




^ ^ ^ http://wwwTnemoryhog.ne1 
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— AND 
ALL THAT 
MEMORY 
GETS 

RECLAIMED. 



OPEN A NEW TAB 
NOW, AND YOU'RE 
STARTING FROM 
SCRATCH. 
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SO AS YOU BROWSE, WE'RE CREATING AND 
DESTROYING PROCESSES ALL THE TIME. IF THERE'S A 
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Wii'liH 1 ! CRAZY MEMORy LEAK. IT WON'T AFFECT YOU FOR THAT LONG 
BECAUSE YOU'LL PROBABLy CLOSE THE TAB AT SOME 
POINT AND GET THAT MEMORy BACK. 






AND WE'RE TAKING IT ONE 
STEP FURTHER. SUPPOSE yOU 
NAVIGATE FROM DOMAIN A TO 
DOMAIN B. THERE'S NO NEED FOR 
ANy RELATIONSHIP BETWEEN 
THE TWO SITES — 





— SO NOW WE CAN THROW AWAY THE 
OLD RENDERING ENGINE, THE OLD DATA 
STRUCTURES, THE OLD PROCESS. 




SO, EVEN WITHIN A 
TAB, WE CAN BE 
COLLECTING AND 
TOSSING OUT THE 
GARBAGE, 
RECYCLING THE 
WHOLE PROCESS. 
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AND JUST LIKE 

with your os, you 

CAM LOOK UNDER 
THE HOOD WITH 
GOOGLE CHROME'S 
TASK MANAGER TO SEE 
WHAT SITES ARE USING 
THE MOST MEMORY, 
DOWNLOADING THE 
MOST BYTES, AND 
ABUSING YOUR 
CPU. 



WHY IS THIS 
APPLICATION 
DOWNLOADING 

THE ENTIRE 
INTERNET? 





yOU CAN EVEN SEE 
PLUG-INS WITHIN THE TAB 
THEY APPEAR IN CHROME 

MANAGER AS SEPARATE 
PROCESSES. 
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SO, WHEN THINGS START FREAKING OUT, 
YOU'LL FINALLY HAVE SOME INSIGHT INTO 
WHO'S MISBEHAVING AND WHY ~ 
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PLACING 
BLAME 

WHERE BLAME 
BELON&S. 
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GOOGLE 
CHROME 15 A 

MASSIVE, 
COMPLICATED 
PRODUCT THAT WILL 
NEED TO LOAD 

SILLIOM5 OF 
DIFFERENT WEB 
PAGES, SO 
TESTING- IS 
CRITICAL. 



Huan Ren, 
Software Engineer 
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FORTUNATELY, 
HERE AT 
GOOGLE, WE 
HAVE AN EQUALLY 

MASSIVE 
INFRASTRUCTURE 
FOR CRAWLING 
WEB PAGES. 



WITHIN 20-30 MINUTES OF EACH NEW BROWSER BUILD, WE CAN 
TEST IT ON TENS OF THOUSANDS OF DIFFERENT WEB PAGES. 
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EACH WEEK, "CHROME BOT" TESTS MILLIONS 
OF PAGES, GIVING OUR DEVELOPERS EARLY 
RESULTS THEY'D OTHERWISE HAVE TO WAIT 
UNTIL EXTERNAL BETA FOR. 












THE KEY IS CATCHING 
PROBLEMS AS EARLY AS 

POSSIBLE. IT IS LESS 
EXPENSIVE AND EASIER 
TO FIX THEM RIGHT AWAY. 
AFTER A FEW DAYS IT IS 
HARDER TO TRACK THEM 
DOWN. 



/ 
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AND CATCHING THEM EARLY 
HELPS ENGINEERS WRITE 
BETTER CODE. THEY SAY, 

"OH, THIS MISTAKE IS PART 
OF A PATTERN" AND THE 
NEXT TIME, THEY'RE LESS 
LIKELY TO MAKE IT. 





Erik Kay, Software Engineer 



ONE BILLION 



> 



OF COURSE, THERE ARE 
BILLIONS, MAYBE TRILLIONS OF 
WEBPAGES OUT THERE. IF EACH BUILD 
IS TESTED AGAINST A MILLION SITES, 
WHICH MILLION DO WE USE? 
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Web Images 



We already rank pages 
based on which pages 
the average user is most 
likely to visit. 

www.alreadyrank.com - Similar Pages 

At the very least , we'll 
make sure we won't be 
broken on the kinds of 
sites people use on a 
day-to-day basis. 

www.attheveryleast.com - Similar Pages 





THERE ARE SEVERAL WAYS WE TEST 
EACH CHECK-IN. FROM UNIT TESTS OF 
INDIVIDUAL PIECES OF CODE — 



Pam 
Greene, 
Software 
Engineer 
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IN LAYOUT TESTING, WEBKIT FOUND THAT 
PRODUCING A SCHEMATIC OF WHAT THE BROWSER 
THINKS IT'S DISPLAYING IS A MORE PRECISE WAY TO 
COMPARE LAYOUTS THAN TAKING SCREENSHOTS AND 
CREATING A CRYPTOGRAPHIC HASH. 
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WHEN WE 
STARTED WE WERE 
PASSING 23% OF WEBKIT'S 
LAYOUT TESTS. MOVING 
FROM THERE TO ?<?% HAS 
BEEN A FUN CHALLENGE AND 
AN INTERESTING EXAMPLE 
OF TEST-DRIVEN 
DESIGN. 




THERE ARE 
LIMITS TO WHAT 
WE CAN DO WITH 
AUTOMATED 
TESTING. 




Name 




WE CAN'T 
TEST WEBSITES 
THAT REQUIRE A 
PASSWORD, FOR 
EXAMPLE. 



Password 



AND IT'S NOT THE SAME AS A 
HUMAN BEING WALKING AROUND 
AND MISUSING THINGS. WE ARE 
USING THE BROWSER IN THE WAY 
WE'VE DESIGNED IT TO BE USED. 




IT'S HARD 
TO COVER 100%, 
BUT THAT'S WHAT 
WE'RE TRYING 
TO DO. 




I DON'T CARE IF 
THERE'S ONE FEWER 
COOL FEATURE. I JUST 
WANT THIS PRODUCT TO 
BE ROCK SOLID. 





+ e <r 


Speed: WebKit and V8 
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BUT NOW, 
YOU HAVE WEB APPLICATIONS LIKE 
GMAIL THAT ARE USING THE WEB 
BROWSER TO ITS FULLEST WHEN IT COMES 
TO DOM MANIPULATIONS AND 
JAVASCRIPT — 




3. Pzt 



JAVASCRIPT ITSELF IS CLASSLESS. 
YOU CAN CREATE A NEW OBJECT, 
DyNAMICALLy ADD PROPERTIES TO 
IT AND GO ON. 




BUT IN V8, AS EXECUTION GOES ON, 
OBJECTS THAT END UP WITH THE SAME 
PROPERTIES WILL SHARE THE SAME HIDDEN 
CLASS AND WE CAN START APPLYING 
DYNAMIC OPTIMIZATIONS BASED ON THAT. 




V8 
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WHEN OTHER JAVASCRIPT ENGINES RUN, THEY 
LOOK AT THE JAVASCRIPT SOURCE CODE AND 
GENERATE AN INTERNAL REPRESENTATION OF IT 
THEY CAN INTERPRET. 




BUT, WHEM YOU HAVE 
TO DO INTERPRETATION, 

YOU HAVE TO LOOK AT 
THE STRUCTURE OF YOUR 
INTERNAL REPRESENTATION 
OVER AND OVER 
AGAIN. 




SO INSTEAD, V8 LOOKS AT THE JAVASCRIPT 
SOURCE CODE AND GENERATES MACHINE 
CODE THAT CAN RUN DIRECTLY ON THE CPU 
THAT'S RUNNING THE BROWSER. 




- WHEN YOU INTERPRET ONCE AND COMPILE MACHINE CODE, THEN 

THAT CODE IS YOUR REPRESENTATION OF THE JAVASCRIPT SOURCE 
CODE AND IT DOESN'T NEED TO BE INTERPRETED, IT JUST RUNS. 
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JAVASCRIPT AND OTHER MODERN 
OBJECT-ORIENTED PROGRAMMING 
LANGUAGES HAVE AUTOMATIC 
MEMORY MANAG-EMENT. 




IF YOU DON'T HAVE A REFERENCE TO AN 
OBJECT ANYMORE, ITS MEMORY CAN BE 
RECLAIMED BY THE SYSTEM. THAT'S 
GARBAGE COLLECTION, AND ITS A FAIRLY 
TRIVIAL PROCESS. 
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BUT 
IN EXISTING 
JAVASCRIPT 
VIRTUAL MACHINES, 

THEY USE 
CONSERVATIVE 
GARBAGE 
COLLECTION — 



o 
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— yOU START SEARCHING THROUGH THE EXECUTION STACK 
TO SEE WHICH WORDS LOOK LIKE POINTERS. 

BUT THE ONES THAT SORT OF LOOK LIKE POINTERS COULD 
ALSO BE INTEGERS THAT JUST HAPPEN TO HAVE THE SAME 
ADDRESS AS AN OBJECT IN THE OBJECT HEAP. 




AND, BECAUSE WE KNOW PRECISELY 
WHERE ALL THE POINTERS ARE, WE 
CAN ALSO IMPLEMENT INCREMENTAL 
GARBAGE COLLECTION. 




MEANING QUICK GARBAGE COLLECTION 
ROUND-TRIPS THAT ARE CLOSE TO A FEW 
MILLISECONDS, COMPARED TO PROCESSING 
ALL IOOMB OF DATA WHICH COULD CAUSE 
SECOND-LONG PAUSES. 



O 

o 



O o o 



o 
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THIS MEANS MUCH 
BETTER INTERACTIVE 
PERFORMANCE OF WEB 

APPLICATIONS, LIKE 
SMOOTHER DRAG AND 
DROPS. 





GOOGLE 




Wf 




V 
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— OR, IF THERE'S 
ANOTHER PROJECT THAT 
JAVASCRIPT CAN APPLY 
TO, DEVELOPERS CAN 
TAKE V8 BY ITSELF. 




WE HOPE V8'S PERFORMANCE 
WILL SET A NEW BAR, AND THAT 
THE OTHER DEVELOPMENT TEAMS 
WILL CONTINUE TO IMPROVE IN 
THIS SPACE. 




BECAUSE IF YOU LOOK AT ANy OTHER 
SYSTEM THAT'S BECOME FASTER OVER TIME, 
WHAT HAPPENS IS THAT YOU 6ET BIGGER, 
BETTER, MORE INVENTIVE APPS. 



II 
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Part Three 
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Search and the User Experience 


0 







WE COULD DETACH THE 
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AND BECAUSE THE TABS ARE THE MOST IMPORTANT 
PART OF THE UI, EACH TAB HAS ITS OWN CONTROLS. 



J v. 




ho*" sttfff works 




n- 




THE OMNIBOX HANDLES FAR 
MORE THAN JUST URLS. 
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cars 



Search Google for cars 
www.cars.com 
www.cars.com/go/search/s' 
Cars - Pixar DVD and Blu 
Consumer Reports: 2008 



IT ALSO 
OFFERS 
SUGGESTIONS 
FOR SEARCHES, 

TOP PAGES 
YOOVE VISITED 
BEFORE, PAGES 
YOU HAVEN'T 
VISITED BUT 
ARE POPULAR 
AND MORE... 



Search imbd.com f« 
See 8 recent pages in history contS 



Glen Murphy, 
Software Engineer 




VOU HAVE FULL TEXT SEARCH 

over youR HisTORy. if you FOUND 

A GOOD SITE FOR DIGITAL CAMERAS 
yESTERDAy, yOU DON'T HAVE TO 
BOOKMARK THAT PAGE 






JUST TYPE 
'DIGITAL CAMERA' 
AND QUICKLy GET 
BACK TO IT. 



C ft 



digital camera 



Search Google for digital came 

www.digitalcamera.com 



Canon EOS Rebel i£Si Black C 



http://www.pcmag.cdU^articles/0 
Nikon Digital SLR _T 



19 



WHEN THE TEAM SUGGESTED 
AUTOCOMPLETION IN LINE, I 

SAID I HATED IT WHEN 
BROWSERS STICK ALL THIS 
CRAP INTO A LOCATION SAR 
AS I'M TYPING. IT'S NEVER 
WHAT I WANT. 




BUT, THEY SAID, NO, 
NO, IT'LL BE FINE, 
TRUST US — AND 
THEY WENT ON AND 
MADE IT SOMETHING 
REALLY COMPELLING... 




INLINE COMPLETIONS 
WILL NEVER FLICKER, 
NEVER FLASH. IT'S 
PERFECTLY, 
AESTHETICALLY 
NON-DISTRACTING. 




cars 




Search Google for ci 
www.cars.com 
www.cars.com/go/se 
Cars - Pixar DVD an 
Consumer Reports: ! 

Search in 
See 8 rec 



PLUS, IT'LL ONLY AUTOCOMPLETE TO SOMETHING YOU'VE EXPLICITLY TYPED BEFORE. 




cnn.com/2008/politics/07/27/campaign. wrap/index, html ?iref=mpstoryv 





OPEM A MEW TAB IN 
MOST BROWSERS TODAY 
AMD YOU'LL GET YOUR 
HOMEPAGE. 



SOME USERS 
HAVE A BLANK 
PAGE BECAUSE 
IT OPENS 
QUICKLY. 




WE'RE GOING TO SHOW A PAGE 
THAT IS DESIGNED TO BE FAST, 
BUT ALSO HELPS YOU COMPLETE 
THAT ACTION. 




21 



IT'S THE PA6ES YOU WERE GOING TO TYPE INTO THE URL BOX ANYWAY. 
GOOGLE CHROME USES YOUR BEHAVIOR IN THE OMNIBOX TO FEED INTO THAT PAGE. 




Most visited 

Evan Martin, Software Engineer Gmail 




New York Times 




Wells Fargo 




Gaail 



— £3- 
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Glen Murphy, Software Engineer 
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Searches 

| History 



| Amazon 

[ 



Mirriam-Webster 



Recently bookmarked 



Recently closed tabs 



VOU MIGHT OPEN IT AND BE, LIKE, WHAT'S ALL MY STUFF DOING HERE? BUT 
AFTER A WHILE, YOU SEE THIS PAGE AND IT'S JUST YOU, IT'S yOUR BROWSER. 



GOOGLE CHROME HAS A PRIVACY 
MODE. VOU CAN CREATE AN 
'INCOGNITO' WINDOW AND NOTHING 
THAT OCCURS IN THAT WINDOW IS 
EVER LOGGED ON YOUR COMPUTER. 
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MALWARE AND PHISHING 
ARE A HUGE PROBLEM FOR USERS 
AFFECTING TRUST AMD 
COMFIDEMCE IN THE WEB. 





WHEM WE 
STARTED THIS 
PROJECT, IT WAS A VERY 
DIFFERENT LANDSCAPE 
FROM WHEN THE OTHER 
BROWSERS STARTED. 




John Abd-EI-Malek, 
Software Engineer 



Ian Fette, 
Product Manager 



BACK. THEN, IT 
WAS ABOUT 
RENDERING 
THE PAGE AND 
GETTING THE 
COOL THINGS 
WORKING. 
THERE WAS 
NO MONETARY 
INCENTIVE TO 
PUT MALWARE 
ON USERS' 
MACHINES. 




NOW, MALWARE 
IS VERY 
FINANCIALLY 
DRIVEN. IT'S 
ALL ABOUT 
STEALING 
PASSWORDS 
AND MOVING 
MONEY 
AROUND. 




IN THINKING ABOUT SECURITY, WE BEGAN WITH 
THE ASSUMPTION THAT YOUR BROWSER WOULD 
GET COMPROMISED. 




VOU 

WILL EVENTUALLY 
ENCOUNTER 
MALWARE. 




"Half-Empty" 



Carlos Pizano, 
Software Engineer 
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WITH SANDBOXING-. OUR goal is to prevent malware from 
INSTALLING ITSELF ON YOUR COMPUTER OR USING WHAT HAPPENS IN 
ONE TAB TO AFFECT WHAT HAPPENS IN ANOTHER. 



THEY CAN 
COMPUTE BUT 
THEY CAN'T WRITE 
FILES TO yOUR 
HARD DRIVE OR 
READ FILES FROM 
SENSITIVE AREAS 
LIKE yOUR 
DOCUMENTS OR 
DESKTOP. 



CHROME PROCESS 





OR AS 
THE SANDBOX TEAM 
PUT IT — 




— WE'VE TAKEN 
THIS EXISTING PROCESS 
BOUNDARy — 






- AND MADE IT 
INTO A JAIL. 



ESS 
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THE PERIMETER OF THE 
SANDBOX IS LAR&ELy BASED OM 
PERMISSIONS. 




Mark Larson, 
Program Manager 



VISTA USES A MODIFIED VERSION 
OF THE BIBA SECURITY MODEL WHICH 
HAS THREE LEVELS. 
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THIS LEVEL IS FOR 
BACKUP SYSTEMS, 
PROGRAMS THAT 
UPDATE, ETC. 



THIS LEVEL IS FOR 
EVERYTHING THE USER 

RUMS NORMALLY. 
NOTEPAD, SOLITAIRE, 
CALCULATOR... 



READING 
IS 

ALLOWED 
FROM 

LOW 

TO 

HIG-H -- 



t 





— BUT 
WRITING- 
IS 

ALLOWED 
ONLY 
FROM 

HIGH 

TO 
LOW. 



TYPICALLY, APPLICATIONS 
RECEIVING AND PROCESSING 
DATA FROM THE INTERNET 
ARE SPLIT INTO THE TWO 
LOWER LEVELS. 
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ZH TERMS OF PERMISSIONS 
ON THE SYSTEM, GOOGLE 
CHROME'S RENDERER MAY RUN AT 
VERY LOW PRIVILEGES, BUT THERE 
ARE PLU&INS THAT RUN AT THE 
SAME LEVEL OR EVEN HIGHER 
THAN THE BROWSER. 



CHROME PROCESS 





PROCESS 
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AND 
MEANWHILE, 
WE HAVE A 
HUGE SURFACE 
AREA REDUCTION 
IN VULNERABILITY, 
FROM ALL 

THIS -- 
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i i : 

THEM THEY SEMD USERS TO A NEARLY EXACT COPY OF THEIR 
BANK'S WEBSITE AMD START STEALING THEIR INFORMATION. 
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I http://www.(bank's name). com 




View Your Accounts 



Go to: | Account Summary | j] 



Username: 



I http://www.(bank's name). login. com 




View Your Accounts 



Go to: | Account Summary |j] 



Username: 




— THOUGH A 
FEW LAST UP 
TO 7 DAYS OR 
MORE. 






















































X 


X 


X 


X 


X 


X 


X 
























THE HARD PART 


IS FINDING THEM 


CLOSE TO TIME 


ZERO. 




Tick: 


— ^ 


Tick: /£r 






Tick : 




T.ck: 




Tick! 
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if you GO TO A 
WEBSITE THAT 
MATCHES THE LIST, 
yOU'LL GET A 
WARNING. 




WE'VE MADE THIS 
SERVICE FREELy 
AVAILABLE. WE'RE HAPPy 
TO GIVE IT AWAy. IT'S A 
PUBLIC API. 





WHEN WE 
DISCOVER 
MALICIOUS 
CONTENT, WE 
NOTIFY THE OWNER 
OF A WEBSITE, WHO 
USUALLy WASN'T 
INTENDING TO BE 
MALICIOUS, AND 
THEY CAN TAKE THIS 
INFORMATION AND 
CLEAN UP THEIR 
SITE. 
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Gears, Standards and Open Source 
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THERE ARE A LOT OF LIMITATIONS TO THE KIMDS OF APPLICATIONS THAT YOU CAN BUILD TODAY 
WITH WEB BROWSERS, AND THE SUBSET OF THINGS YOU CAN DO IS DIFFERENT FOR EACH BROWSER. 
IF ONE BROWSER HAS A COOL FEATURE, THAT DOESN'T HELP — 





THEY DOM'T HAVE 
TO PAY US. THEY 
DOM'T HAVE TO ASK 
OUR PERMISSION!. 



THEY DOM'T HAVE 
TO SHARE PATCHES OR 
REPORT BU6S* 





* THOUGH, IF THEY LIKE, WE HAVE 
SYSTEMS IM PLACE FOR THAT. 





SURE, WE 

COULD ship a 

PROPRIETARY 
BROWSER AMD 
HOLD IT IM. 






THAT'S WHY 
WE'RE OPEM 
SOURCIMG THE 
WHOLE THIMG. WE 
NEED THE IMTERMET 
TO BE A FAIR, 
SMART, SAFE 
PLACE. 
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WE ARE ABOUT 
BUILDING GOOGLE 
CHROME, IT'S 
IMPORTANT TO HELP 
ALL BROWSERS 
BECOME MORE 
POWERFUL ~ 



fiooomoioioi 

L01010001010010\ 
L01010111001000] 
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USER 



~ TO KEEP 
EVOLVING WITH 
THE WEB AND 
CONTINUING TO 
BUILD A SOLID 
FOUNDATION for 
MODERN WEB 
APPLICATIONS. 



□□□ 
□□□ 



WEBKIT 




0 














W' PROCESS 


J— \ 





J \- 
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Words 

The Google Chrome Team 

Comics Adaptation 

Scott McCloud 



Go gle 



www.google.com/chrome 
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